$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bf05178-ebd1-3518-bf11-91abeebf1647.roa File: 3bf05178-ebd1-3518-bf11-91abeebf1647.roa (raw, json) Hash identifier: 4IgL1dYLIHGXMZ0h5VMZuar2J1wK4lIlVIQRV0JhZm8= Subject key identifier: B0:D9:DD:C6:B3:BF:3C:26:12:B3:02:80:BA:C1:33:4C:3C:9B:B1:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636731D41BEAB5DF62C3280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bf05178-ebd1-3518-bf11-91abeebf1647.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 72.220.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:73:1d:41:be:ab:5d:f6:2c:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=80b78579-b49f-407a-84d4-f75fc5c9e133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:40:81:cb:ef:7b:0e:33:65:b3:9b:fe:d6: cd:55:19:0c:6d:16:25:8c:7f:27:52:cc:ac:12:6f: e1:ee:6a:20:ec:fd:29:77:47:2e:25:b3:d3:4d:23: e1:d6:37:0a:94:87:1c:62:c2:48:92:84:b9:6b:d0: 9a:8a:07:88:90:d5:a8:c4:b2:c2:68:b2:af:67:0c: 40:63:30:7e:e4:47:10:6b:01:2c:99:ed:b7:42:d3: d7:6d:4b:91:89:1f:d9:da:3c:c2:83:5a:3f:d1:db: 6f:d6:ef:dd:ba:8c:b5:a5:23:71:c9:af:15:06:49: 47:cc:87:99:81:9f:78:ea:c4:b6:3c:24:69:51:d4: b1:89:73:11:24:7d:4a:dc:97:76:c0:7a:d6:9f:83: 05:7b:05:7e:d8:13:80:37:d9:9d:39:49:16:68:27: 7b:56:cd:16:8b:c1:48:5d:01:ef:cb:8a:89:e0:b5: 29:3e:de:8a:f5:5f:45:85:43:07:ea:ed:10:28:60: af:1b:1d:3c:2c:23:45:88:de:34:74:c0:3e:33:d9: e8:c0:e2:54:f5:c6:9c:99:6c:f9:84:77:45:d5:f6: 68:70:5f:f1:ea:34:72:55:7b:67:4b:96:90:c5:68: c6:1e:9e:68:0a:84:6b:a1:37:16:e0:f5:44:71:51: 50:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D9:DD:C6:B3:BF:3C:26:12:B3:02:80:BA:C1:33:4C:3C:9B:B1:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bf05178-ebd1-3518-bf11-91abeebf1647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:9f:92:79:67:f4:4c:1e:4e:9e:f3:48:2e:33:ae:3d:71:e1: 73:fd:58:42:93:30:a8:63:21:be:bf:36:1a:c2:30:4c:e7:3d: 2a:fa:bf:45:4b:45:db:e3:56:ac:47:11:47:7c:b8:55:14:d1: ae:02:53:db:ce:3f:8f:1d:59:60:60:87:8e:f0:ac:76:44:42: 88:1e:87:71:01:1c:d8:13:8f:cb:43:89:ef:78:2c:0a:0d:cd: fb:f7:64:e4:99:db:2c:25:0f:c6:17:29:d2:3e:de:3c:4d:21: 02:1e:47:6e:3b:b4:d3:91:ae:74:b2:0d:3d:46:06:bb:dd:13: 74:aa:46:8f:a1:03:74:4f:a5:f9:53:06:71:23:e0:ed:87:ce: ff:96:92:0c:17:e7:76:81:59:78:20:02:4f:c4:65:cd:31:89: 92:ff:94:a2:58:78:c4:49:1e:7b:26:3c:0f:00:88:21:89:0d: 11:cc:af:9d:90:13:33:89:30:1a:40:bc:f8:4e:ca:72:78:57: 03:42:22:31:77:47:4c:ce:a2:64:da:0a:da:d8:0b:c7:ad:f1: 70:cd:de:ae:bf:fc:bd:61:6e:ec:f7:32:0e:f2:03:ee:41:37: 08:a6:0b:e9:85:6c:bb:9f:f7:0c:91:5d:74:c3:72:ec:8a:59: 80:3c:1e:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnMdQb6rXfYsMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODBiNzg1NzktYjQ5Zi00MDdhLTg0ZDQtZjc1ZmM1YzllMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO9Agcvvew4zZbOb/tbNVRkMbRYljH8nUsys Em/h7mog7P0pd0cuJbPTTSPh1jcKlIccYsJIkoS5a9CaigeIkNWoxLLCaLKvZwxA YzB+5EcQawEsme23QtPXbUuRiR/Z2jzCg1o/0dtv1u/duoy1pSNxya8VBklHzIeZ gZ946sS2PCRpUdSxiXMRJH1K3Jd2wHrWn4MFewV+2BOAN9mdOUkWaCd7Vs0Wi8FI XQHvy4qJ4LUpPt6K9V9FhUMH6u0QKGCvGx08LCNFiN40dMA+M9nowOJU9cacmWz5 hHdF1fZocF/x6jRyVXtnS5aQxWjGHp5oCoRroTcW4PVEcVFQAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDZ3cazvzwmErMCgLrBM0w8m7G1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2JmMDUxNzgtZWJkMS0z NTE4LWJmMTEtOTFhYmVlYmYxNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqfknln9EweTp7zSC4zrj1x4XP9WEKTMKhjIb6/NhrCMEznPSr6v0VL RdvjVqxHEUd8uFUU0a4CU9vOP48dWWBgh47wrHZEQogeh3EBHNgTj8tDie94LAoN zfv3ZOSZ2ywlD8YXKdI+3jxNIQIeR247tNORrnSyDT1GBrvdE3SqRo+hA3RPpflT BnEj4O2Hzv+WkgwX53aBWXggAk/EZc0xiZL/lKJYeMRJHnsmPA8AiCGJDRHMr52Q EzOJMBpAvPhOynJ4VwNCIjF3R0zOomTaCtrYC8et8XDN3q6//L1hbuz3Mg7yA+5B NwimC+mFbLuf9wyRXXTDcuyKWYA8Hvc= -----END CERTIFICATE-----Generated at Sun Aug 10 04:26:11 2025 by rpki-client